Solved

Access to server thru RWW

Posted on 2010-11-12
11
537 Views
Last Modified: 2012-05-10
Hello Experts

I need to give a standard user in a SBS 2008 network access to the server.  I don't want to make the account a Network Admin because it is an outside user from the company.  The user can access the RWW, but the option to connect to server isn't there.

Is there a way to give this user server access thru RWW without making them a network admin?

Thanks.
0
Comment
Question by:Ray Drummond
  • 5
  • 3
  • 2
  • +1
11 Comments
 
LVL 23

Assisted Solution

by:ormerodrutter
ormerodrutter earned 75 total points
ID: 34121666
No. Only admin allows to RDP to SBS server, without using third party software/tool.

One thing you can do (although I am against the idea of allowing an ordinary user to mess with my SBS server, let alone an outsider!!) is to install something like VNC server on your SBS and VNC viewer on his computer, configure a password if you wish and he can connect this way.

VNC is more like an user support tool that he would take control of the mouse+keyboard and you can actually see what he is doing on the server monitor.
0
 
LVL 77

Accepted Solution

by:
Rob Williams earned 175 total points
ID: 34133565
What exactly do you want them to be able to do?

There are the remote server administrator tools. This allows them to administer the server without having direct access, however I suspect this is more control that you want to give:
XP:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=e487f885-f0c7-436a-a392-25793a25bad7&displaylang=en#SystemRequirements
Vista:
http://www.microsoft.com/downloads/en/details.aspx?FamilyId=9FF6E897-23CE-4A36-B7FC-D52065DE9960&displaylang=en
Win7:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=7d2f6ad7-656b-4313-a005-4e344e43997d&displaylang=en

If you want to give them access to Active Directory but control what they want to do you can use delegation:
http://www.windowsecurity.com/articles/Implementing-Active-Directory-Delegation-Administration.html
0
 

Author Comment

by:Ray Drummond
ID: 34137345
They just need to be able to access a billing system on the server.  I don't want them doing anything else.
0
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
LVL 23

Expert Comment

by:ormerodrutter
ID: 34137389
No I don't think you can achieve your objective without giving him the Admin access. Shouldn't really installed the billing system on the server unless it is a client/server application.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34137447
Agreed.
Why are you running the application on the server?
SBS is not intended as an application server. Remote access is for administration only and the server is optimized for background services not applications.
0
 

Author Comment

by:Ray Drummond
ID: 34137470
It wasn't me.  This is a client that was picked up that already had a SBS in place.  The prior company installed it all and I'm just trying to make it work.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34137905
The problem is the only way to run remote desktop is as an admin on SBS. Though you can limit some permissions this user needs to have admin to logon and full rights to run the application, access the program folder, the data file, and possibly the registry. Very difficult to restrict a user in this situation. You could create a new admin account and using deny permissions restrict access to much of the data, but they would still have the right to administer the server.
0
 

Author Comment

by:Ray Drummond
ID: 34139781
Ok, so I guess I'll see what I can do about moving this billing solution to another computer.  They only have the one SBS on their network.  I really don't want here having any kind of access beyond what she absolutely needs.
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34141447
I can appreciate your predicament but perhaps a PC would be a better option.
0
 

Expert Comment

by:Cr0n0s
ID: 34392432
Hello,

A workaround for this issue is to place the server in the computer group, give the user the required access , afterwards place the computer back in server group in AD.

The setting is stored.

grtz
Smartsys
0
 
LVL 77

Expert Comment

by:Rob Williams
ID: 34392509
Ignoring the fact that moving OU's will not resolve the issue, if you place the SBS in the computer OU, group policy for computers will be applied and could cause all sorts of chaos on a DC.
0

Featured Post

Free Tool: Postgres Monitoring System

A PHP and Perl based system to collect and display usage statistics from PostgreSQL databases.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
I've attached the XLSM Excel spreadsheet I used in the video and also text files containing the macros used below. https://filedb.experts-exchange.com/incoming/2017/03_w12/1151775/Permutations.txt https://filedb.experts-exchange.com/incoming/201…

679 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question